CVE-2008-2812
09.07.2008, 00:41
The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.Enginsight
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 𝑥 < 2.6.25.10 |
| canonical | ubuntu_linux | 6.06 |
| canonical | ubuntu_linux | 7.04 |
| canonical | ubuntu_linux | 7.10 |
| canonical | ubuntu_linux | 8.04 |
| opensuse | opensuse | 10.3 |
| opensuse | opensuse | 11.0 |
| debian | debian_linux | 4.0 |
| avaya | communication_manager | 3.1 ≤ |
| avaya | expanded_meet-me_conferencing | * |
| avaya | intuity_audix_lx | 2.0 |
| avaya | meeting_exchange | 5.0 |
| avaya | message_networking | 3.1 |
| avaya | messaging_storage_server | 4.0 |
| avaya | proactive_contact | 4.0 |
| avaya | sip_enablement_services | - |
| avaya | sip_enablement_services | 4.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| linux |
| ||||||||||
| linux-source-2.6.15 |
| ||||||||||
| linux-source-2.6.20 |
| ||||||||||
| linux-source-2.6.22 |
|
Common Weakness Enumeration
References